Compliance with laws and internal regulations is a top priority for profine. Against this background, we have supplemented our compliance system with a whistleblower system. Employees, business partners, but also third parties have the possibility to anonymously report irregular behavior at any time.

Further information and access to our whistleblowing system can be found here:

https://profine-group.gt-wbs.com/sign-in

We use the whistleblowing system “INVENSITY” of Invensity GmbH, Mainzer Straße 19, 65185 Wiesbaden. Within the framework of our whistleblower system, information can be provided anonymously. To submit a notification via our whistleblower platform, it is sufficient to provide information about the location, time and circumstances of the reportable circumstance in the description of facts. The transmission of your report is encrypted and, according to information from Invensity, in pseudonymous form, i.e. without assignment to a user, with your metadata removed. However, you may voluntarily disclose personal data about yourself as part of the reporting process. If you do not disclose any personal data, the case agents will not be able to establish a personal reference to you. 

In order to receive and clarify serious cases of suspected violations of rules at profine, the following data may (optionally) be processed as part of the whistleblower platform: Information about the accused person (e.g. surname, first name, position and employment details), information about the alleged breaches of conduct. When submitting your report, please refrain from providing sensitive information about the accused persons unless it is necessary for the description of their concern.  However, we cannot exclude the receipt and thus the processing of special category personal data as defined in Art. 9 GDPR.

profine GmbH will only process your data to the extent permitted by an applicable legal provision. The establishment of the whistleblower portal serves the fulfillment of our legal obligations pursuant to Art. 6 para. 1 lit. c GDPR in conjunction with. Directive (EU) 2019/1937 and for the implementation of internal compliance measures for the detection of breaches of obligations under employment contracts (Section 26 para. 1 Sentence 1 Federal Data Protection Act (BDSG)) and the investigation of criminal offenses Section 26 para. 1 Sentence 2 BDSG. In addition, we base the processing of personal data on our legitimate interest in appropriate corruption prevention and control pursuant to Art. 6 para. 1 lit. f GDPR. By submitting the reporting form, the persons providing the information declare their consent to any data processing relating to them (Art. 6 para. 1 lit. a GDPR). 

Personal data that we receive via our whistleblower system will be retained for the duration necessary to clarify and conclusively assess the whistleblowing. After completion of the investigation, the personal data will be deleted within a reasonable period of regularly one month and in accordance with the legal requirements. If judicial and/or disciplinary proceedings are initiated, they may be retained until the conclusion of the proceedings or the expiry of any time limits for appeal. Personal data in connection with unfounded reports will be deleted immediately.